Skip to content

[DOCS] Enhancements to Users page #2064

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
jmikell821 opened this issue Jun 13, 2022 · 2 comments · Fixed by #2178
Closed

[DOCS] Enhancements to Users page #2064

jmikell821 opened this issue Jun 13, 2022 · 2 comments · Fixed by #2178
Assignees
Labels
Team: Threat Hunting Formerly Data Visibility v8.3.0

Comments

@jmikell821
Copy link
Contributor

jmikell821 commented Jun 13, 2022

Topic to update: https://www.elastic.co/guide/en/security/current/users-page.html

Related issue: elastic/kibana#129046
Related PRs:

Users by Risk tab

Add the "Users by Risk" tab to the user details page. The tab should be similar to the one on the host details page.
The tab is only visible when riskyUsersEnabled is enabled.

image

image

Add Authentication tab

Related issue: elastic/kibana#129047, PR: elastic/kibana#129456

How to test it

  1. Enable feature flag riskyUsersEnabled
  2. Insert and enable user risk transforms https://github.com/elastic/mechagodzilla/pull/188/files (currently not working)
  3. Go to the user page and click on the 'users by risk' tab
  4. Click on a user name
  5. Click on the 'users by risk' tab
  6. Make sure the time range includes dates with user risk data
@jmikell821 jmikell821 added Team: Threat Hunting Formerly Data Visibility v8.3.0 labels Jun 13, 2022
@jmikell821 jmikell821 self-assigned this Jun 13, 2022
@jmikell821 jmikell821 changed the title [DOCS] Add new "Users by risk" tab to the user details page [DOCS] Enhancements to Users page Jun 13, 2022
@SourinPaul
Copy link

@jmikell821 connecting our offline conversations here - @randomuserid is working on the URS readme and can share the work-in-progress PR here, so you can review it in parallel. Thanks for collaborating.

@randomuserid
Copy link

Have written detailed docs on user risk score, PR is here: elastic/detection-rules#2055

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team: Threat Hunting Formerly Data Visibility v8.3.0
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants